Configuring ACL-based Traffic Policing
ACL-based traffic policing allows the device to limit the rate of packets matching ACLs and take different actions for packets of different colors.
Pre-configuration Tasks
Configuring link layer attributes of interfaces to ensure that the interfaces work properly
Configuring an ACL
Procedure
- Configuring traffic policing globally or in a VLAN
- Run the following commands as required.
On the other S2700EI models except S2700-52P-EI and S2700-52P-PWR-EI, run:
traffic-limit [ vlan vlan-id ] inbound acl { { [ ipv6 ] { bas-acl | adv-acl | name acl-name } } | l2-acl } [ rule rule-id ] cir cir-value [ cbs cbs-value ]
Traffic policing is configured for incoming packets matching an ACL.
On the S2700-52P-EI, S2700-52P-PWR-EI, S2710SI, S3700SI, and S3700EI, run:
traffic-limit [ vlan vlan-id ] inbound acl { [ ipv6 ] { bas-acl | adv-acl | name acl-name } | l2-acl | user-acl } [ rule rule-id ] cir cir-value [ pir pir-value ] [ cbs cbs-value pbs pbs-value ] [ [ green { drop | pass [ remark-dscp dscp-value ] } ] [ yellow { drop | pass [ remark-dscp dscp-value ] } ] [ red { drop | pass [ remark-dscp dscp-value ] } ] ]
Traffic policing is configured for incoming packets matching an ACL.
On the other S2700EI models except S2700-52P-EI and S2700-52P-PWR-EI, run:
traffic-limit [ vlan vlan-id ] inbound acl { l2-acl | name acl-name } [ rule rule-id ] acl { bas-acl | adv-acl | name acl-name } [ rule rule-id ] cir cir-value [ cbs cbs-value ]
Traffic policing is configured for incoming packets matching Layer 2 and Layer 3 ACLs.
On the S2700-52P-EI, S2700-52P-PWR-EI, S2710SI, S3700SI, and S3700EI, run:
traffic-limit [ vlan vlan-id ] inbound acl { l2-acl | name acl-name } [ rule rule-id ] acl { bas-acl | adv-acl | name acl-name } [ rule rule-id ] cir cir-value [ pir pir-value ] [ cbs cbs-value pbs pbs-value ] [ [ green { drop | pass [ remark-dscp dscp-value ] } ] [ yellow { drop | pass [ remark-dscp dscp-value ] } ] [ red { drop | pass [ remark-dscp dscp-value ] } ] ]
Traffic policing is configured for incoming packets matching Layer 2 and Layer 3 ACLs.
Traffic policing can define packet colors:
- When the size of a packet is less than the CBS, the packet is colored green.
- When the size of a packet is greater than or equal to the CBS but less than the PBS, the packet is colored yellow.
- When the size of a packet is greater than or equal to the PBS, the packet is colored red.
By default, green packets and yellow packets are allowed to pass through, and red packets are discarded.
- Run the following commands as required.
- Configuring traffic policing on an interface
